Individuals evidently expected and relied on the systems they used to effectively thwart attacks and enable them to take corrective action should something go amiss. Given this backdrop, any proposed identity ecosystem would need to actually protect its users rather than merely state that it would do so. Thus, system efficacy, or a proposed system’s ability to effectively limit information security threats, is an important consideration for potential adopters of the new system.